$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa File: 663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa (raw, json) Hash identifier: gTiKS7lD0I63uhw7kBPCUWC3AWCiaN2WH5Jix7QrGEM= Subject key identifier: C3:A9:71:ED:09:32:34:CD:B6:6B:04:94:74:A0:2D:8F:65:D2:40:4A Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec Certificate serial: 010D0C9F43285848F546EE90494736E18FF35480 Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa Signing time: Fri 21 Feb 2025 16:42:51 +0000 ROA not before: Fri 21 Feb 2025 16:42:51 +0000 ROA not after: Thu 22 May 2025 15:42:51 +0000 asID: 40712 IP address blocks: 23.134.244.0/24 maxlen: 24 2602:f6e2::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:46:ee:90:49:47:36:e1:8f:f3:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec Validity Not Before: Feb 21 16:42:51 2025 GMT Not After : May 22 15:42:51 2025 GMT Subject: CN=322b4ba8-460c-4252-9d7d-0a8f583033b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:15:92:fd:49:5f:71:4c:84:9a:36:4e:db:72: 3d:cb:a9:ba:9b:bd:6e:b2:2e:f8:bc:09:e7:de:34: 68:a5:84:7d:11:c2:17:a7:8e:fa:8f:8c:3d:33:1c: 00:ce:3b:03:ff:e7:81:a6:b1:fa:73:9e:b9:28:44: c0:00:32:8c:8c:e5:fb:f3:96:7b:62:85:51:55:90: 25:9b:ee:ec:f5:06:20:b7:bc:8d:10:2a:7f:b4:4c: 02:e3:76:b5:48:a0:94:cd:65:4e:94:24:b9:a3:6d: 96:cd:dc:94:f7:08:b4:e9:1d:bb:8f:e3:b0:e7:50: a6:50:86:58:ad:b5:63:ae:cd:be:ec:39:1f:54:f3: 5d:4e:6c:84:d0:2a:cf:99:13:b3:dd:87:c8:7b:06: 66:b8:51:f0:23:91:dc:18:28:c2:29:d8:e5:50:bb: 96:e2:5b:82:09:8c:52:4d:5b:a6:9d:96:14:ea:61: 3c:e5:a0:51:f3:22:89:54:20:59:f2:88:bf:4c:af: 21:f8:d3:45:47:54:23:9e:d8:f0:9f:46:84:ab:8f: 48:34:0c:fd:7e:7a:32:a4:16:18:0f:13:50:df:41: 6a:57:1b:e4:1c:22:a9:4d:8a:b9:57:c2:90:73:8d: 80:a3:46:32:6b:e6:c9:83:3f:2a:c7:ba:bd:0e:ff: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A9:71:ED:09:32:34:CD:B6:6B:04:94:74:A0:2D:8F:65:D2:40:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl X509v3 Authority Key Identifier: keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 IPv6: 2602:f6e2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3f:77:1c:e2:fd:32:c4:f2:ec:42:28:3c:f5:d8:05:6a:6a: 73:30:6e:4c:1f:1a:bb:22:78:8b:b4:af:9a:50:5d:93:5f:68: 8e:c4:06:da:5c:7f:72:a0:a3:09:aa:f3:8c:80:2b:54:0a:7e: da:c7:df:be:d6:a0:da:44:88:bc:4b:fb:03:9a:27:39:2f:75: f3:c7:a6:2b:30:5b:5f:67:be:15:06:51:ee:93:c7:20:b7:1d: 1d:26:29:9c:93:ec:93:71:b6:5a:64:07:f8:9c:4a:1e:4c:6f: 43:e6:49:ac:d8:55:14:51:4e:21:8a:57:e6:7e:29:08:5c:f1: 10:fa:40:6b:b3:22:1a:6f:92:12:67:a6:ac:f1:41:6d:0f:21: 7c:e3:19:9e:5d:87:56:89:5d:aa:96:c8:45:c7:92:1d:4d:33: 60:40:7f:51:85:f2:a1:74:db:55:bb:99:2e:b2:de:71:30:d3: b3:17:65:b6:63:02:d5:ce:d3:d2:a0:46:73:91:58:4f:c1:2d: da:70:cc:74:e0:0c:3a:65:f2:6e:76:e5:9c:0b:6b:bd:6c:f8: 60:66:15:87:4a:fa:02:84:82:17:8f:3e:51:ae:df:33:68:64: 97:ee:86:c3:e8:10:d9:8f:fe:5e:bc:a4:4a:58:b1:43:f7:b1: 2e:21:be:cc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEj1Ru6QSUc24Y/zVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2 NmVjMB4XDTI1MDIyMTE2NDI1MVoXDTI1MDUyMjE1NDI1MVowLzEtMCsGA1UEAxMk MzIyYjRiYTgtNDYwYy00MjUyLTlkN2QtMGE4ZjU4MzAzM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRWS/UlfcUyEmjZO23I9y6m6m71usi74vAnn 3jRopYR9EcIXp476j4w9MxwAzjsD/+eBprH6c565KETAADKMjOX785Z7YoVRVZAl m+7s9QYgt7yNECp/tEwC43a1SKCUzWVOlCS5o22WzdyU9wi06R27j+Ow51CmUIZY rbVjrs2+7DkfVPNdTmyE0CrPmROz3YfIewZmuFHwI5HcGCjCKdjlULuW4luCCYxS TVumnZYU6mE85aBR8yKJVCBZ8oi/TK8h+NNFR1Qjntjwn0aEq49INAz9fnoypBYY DxNQ30FqVxvkHCKpTYq5V8KQc42Ao0Yya+bJgz8qx7q9Dv/S/QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMOpce0JMjTNtmsElHSgLY9l0kBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kODg0 Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvNjYzYjY1NTQtOGZmMy0z ZmQwLThkM2YtZGFhZjk0ZTAyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDg4NDM3OWEtNDQ3ZC00NDVjLWI0 NjUtM2ZlODk0YWE2NmVjL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1iNDY1LTNmZTg5NGFh NjZlYy5jcmwwHwYDVR0jBBgwFoAUCaY/g3z0aM5v5uBZTUdBH5jhZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4 OTRhYTY2ZWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b0MA4E AgACMAgDBgQmAvbiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaP3cc4v0yxPLsQig89dgFampzMG5MHxq7 IniLtK+aUF2TX2iOxAbaXH9yoKMJqvOMgCtUCn7ax9++1qDaRIi8S/sDmic5L3Xz x6YrMFtfZ74VBlHuk8cgtx0dJimck+yTcbZaZAf4nEoeTG9D5kms2FUUUU4hilfm fikIXPEQ+kBrsyIab5ISZ6as8UFtDyF84xmeXYdWiV2qlshFx5IdTTNgQH9RhfKh dNtVu5kust5xMNOzF2W2YwLVztPSoEZzkVhPwS3acMx04Aw6ZfJuduWcC2u9bPhg ZhWHSvoChIIXjz5Rrt8zaGSX7obD6BDZj/5evKRKWLFD97EuIb7M -----END CERTIFICATE-----Generated at Sat May 10 23:11:00 2025 by rpki-client